{"_id":"@mcpgrade/mcp","_rev":"2-5a47e3db427f36642dc2dcf83c694525","name":"@mcpgrade/mcp","dist-tags":{"latest":"0.1.1"},"versions":{"0.1.0":{"name":"@mcpgrade/mcp","version":"0.1.0","keywords":["mcp","model-context-protocol","modelcontextprotocol","security","mcpgrade","trust"],"license":"MIT","_id":"@mcpgrade/mcp@0.1.0","maintainers":[{"name":"mcpgrade_user","email":"jeremy@mcpgrade.dev"}],"homepage":"https://mcpgrade.dev","bugs":{"url":"https://github.com/jeremyrx7/mcpgrade/issues"},"bin":{"mcpgrade-mcp":"index.mjs"},"dist":{"shasum":"074d77b06c98fa64a8f34d4812220f2ee4069ad5","tarball":"https://registry.npmjs.org/@mcpgrade/mcp/-/mcp-0.1.0.tgz","fileCount":3,"integrity":"sha512-i37LySUbezRjR4LE02hXl9X9YScPirhnWJ0AM2U//lndSrKo0RPnt3D/dJvaKa0RTuVOJiw2MzGbHQBJWSPuOQ==","signatures":[{"sig":"MEUCIAvz3E6hl5oorsIE4cWjjRipoNFevqa3b3EEKAEIU3rFAiEA9iiZUQ8BOP2iuTaZt/kdB4bhKTMAssOtDU+SfHBLy/M=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":9515},"type":"module","engines":{"node":">=18"},"gitHead":"0503feeffb6453636dada3ca915ebad2a8a832cd","mcpName":"io.github.jeremyrx7/mcpgrade","_npmUser":{"name":"mcpgrade_user","email":"jeremy@mcpgrade.dev"},"repository":{"url":"git+https://github.com/jeremyrx7/mcpgrade.git","type":"git","directory":"mcp-server"},"_npmVersion":"11.10.0","description":"Check MCP server security grades (A–F) from mcpgrade.dev, from inside your agent.","directories":{},"_nodeVersion":"25.2.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/mcp_0.1.0_1784548241700_0.8695657167064754","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@mcpgrade/mcp","version":"0.1.1","mcpName":"dev.mcpgrade/mcp","description":"Check MCP server security grades (A–F) from mcpgrade.dev, from inside your agent.","type":"module","bin":{"mcpgrade-mcp":"index.mjs"},"engines":{"node":">=18"},"keywords":["mcp","model-context-protocol","modelcontextprotocol","security","mcpgrade","trust"],"license":"MIT","homepage":"https://mcpgrade.dev","repository":{"type":"git","url":"git+https://github.com/jeremyrx7/mcpgrade.git","directory":"mcp-server"},"gitHead":"8222769b77fef96bf2b4f20fdc82d8936844ffa3","_id":"@mcpgrade/mcp@0.1.1","bugs":{"url":"https://github.com/jeremyrx7/mcpgrade/issues"},"_nodeVersion":"25.2.1","_npmVersion":"11.10.0","dist":{"integrity":"sha512-fS02EiAHgFFUaRwbQWchOAmyN0/kGbXIPaRf0Gv4ClEcX8akx0v8u6qEiNgTWv85X7wQ9t5joPjR1Ee7N4mrwg==","shasum":"1376b377f258576eb4c02e589c058c34ed248916","tarball":"https://registry.npmjs.org/@mcpgrade/mcp/-/mcp-0.1.1.tgz","fileCount":3,"unpackedSize":9503,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCICMqh2hHRWnA0ofOzBonN9MnJwK/eQty8MCPlrcAbunMAiBw7ZLC4resiQQOaeIlk9vcUjQ4GNLQ7heooJZzBKYCkg=="}]},"_npmUser":{"name":"mcpgrade_user","email":"jeremy@mcpgrade.dev"},"directories":{},"maintainers":[{"name":"mcpgrade_user","email":"jeremy@mcpgrade.dev"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/mcp_0.1.1_1784550132011_0.5472978219652254"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-20T11:50:41.485Z","modified":"2026-07-20T12:22:12.328Z","0.1.0":"2026-07-20T11:50:41.836Z","0.1.1":"2026-07-20T12:22:12.139Z"},"bugs":{"url":"https://github.com/jeremyrx7/mcpgrade/issues"},"license":"MIT","homepage":"https://mcpgrade.dev","keywords":["mcp","model-context-protocol","modelcontextprotocol","security","mcpgrade","trust"],"repository":{"type":"git","url":"git+https://github.com/jeremyrx7/mcpgrade.git","directory":"mcp-server"},"description":"Check MCP server security grades (A–F) from mcpgrade.dev, from inside your agent.","maintainers":[{"name":"mcpgrade_user","email":"jeremy@mcpgrade.dev"}],"readme":"# @mcpgrade/mcp\n\nAn MCP server that lets your agent check the **security grade (A–F)** of any MCP server in the registry — *before* it installs or trusts it. Powered by [mcpgrade.dev](https://mcpgrade.dev).\n\nStatic-analysis grades across six checks: prompt-injection surface, supply chain, credential hygiene, permission scope, version drift, and transport/auth. No key, no signup — it reads the public grade feed.\n\n## Install\n\nAdd it to your MCP client config. It runs via `npx`, so there's nothing to install first.\n\n**Claude Desktop / Claude Code / Cursor / Windsurf** (`mcpServers` block):\n\n```json\n{\n  \"mcpServers\": {\n    \"mcpgrade\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@mcpgrade/mcp\"]\n    }\n  }\n}\n```\n\n## Tools\n\n- **`check_mcp_server(name)`** — look up a specific server's grade, score, publisher, and a link to the full report. Accepts a full id (`com.stripe/mcp`) or a partial name (`stripe`).\n- **`search_mcp_servers({ query?, category?, min_grade?, limit? })`** — find graded servers, ranked best-grade-first. e.g. \"database servers graded B or above\".\n\nExample — ask your agent *\"is the stripe MCP server safe?\"* and it can call `check_mcp_server` and read back the grade + report link.\n\n## Notes\n\n- Grades are **static analysis only** — they reflect what's observable in the published package and manifest, not runtime behaviour or intent. Each grade is disputable; the report link shows the findings behind it.\n- Data refreshes daily as mcpgrade re-crawls the registry. The server caches the feed for an hour.\n\nFull register, methodology, and per-server reports: **https://mcpgrade.dev**\n","readmeFilename":"README.md"}